Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
File: lARhCLVCYUQkIsD7yAs_qYbr6To.mft (raw, json)
Hash identifier: qCLccdX5HVZorEw1uYMu4iPByF/Zlmykkg85PcLMLXo=
Subject key identifier: A7:65:B2:E5:8E:F2:6C:5A:2B:0F:F7:46:B9:C7:7C:AE:0C:71:23:32
Authority key identifier: 94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
Certificate issuer: /CN=94046108b54261442422c0fbc80b3fa986ebe93a
Certificate serial: 019CAA58CFF12E0E0D5A7EB08FD1C2B46108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:12 +0000
Manifest this update: Sun 01 Mar 2026 17:01:12 +0000
Manifest next update: Mon 02 Mar 2026 17:01:12 +0000
Files and hashes: 1: lARhCLVCYUQkIsD7yAs_qYbr6To.crl (hash: ADnEkklqteHk8byTqs12+kmzANh6KMZXTCVnpcw7rVI=)
2: tYHsABD7wqlyFO9X8Yy_-luDgKw.roa (hash: i2ZdarVr8LLRaDGxjRmRFhWtnj6AvxOcMrUABRbNylE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:cf:f1:2e:0e:0d:5a:7e:b0:8f:d1:c2:b4:61:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94046108b54261442422c0fbc80b3fa986ebe93a
Validity
Not Before: Mar 1 17:01:12 2026 GMT
Not After : Mar 2 17:01:12 2026 GMT
Subject: CN=a765b2e58ef26c5a2b0ff746b9c77cae0c712332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:e8:9d:64:d4:6e:cd:70:f4:8c:63:f4:57:
ed:17:b2:50:04:c4:68:56:d5:79:dd:97:07:70:16:
f7:b1:e9:cf:a5:c7:b2:e0:d3:e5:41:0b:d5:3c:c9:
1a:d5:6d:8a:3a:e6:ca:57:aa:fb:57:da:be:c3:d1:
ba:7a:a1:e4:cb:4c:86:7e:6a:1e:4e:c2:aa:18:f5:
78:37:9a:76:56:bc:6d:85:01:11:aa:96:1a:0b:fb:
0b:df:a8:8b:51:8c:e6:97:ed:10:69:91:d1:18:16:
8e:3f:20:19:8b:20:e7:3b:8e:f0:c5:9b:5c:f6:61:
c1:d3:d0:ca:da:56:b3:23:70:26:ac:1c:70:0a:83:
c1:58:b1:2a:d9:ae:b1:11:35:e0:25:4d:e8:e2:7e:
c7:72:5a:89:f2:f6:1d:0e:29:bf:96:98:10:e1:89:
7b:9e:cc:84:ae:fd:0f:7a:20:d1:24:84:11:4d:09:
9d:00:91:9e:f5:7f:ad:ba:64:d8:45:4b:c5:bd:78:
ef:b1:17:b4:35:3d:54:ea:17:ac:1d:6c:7d:a9:7b:
e8:0a:9f:a5:ae:dc:1b:f8:0e:84:aa:8c:01:74:7d:
45:8e:f0:ea:45:0c:62:ca:71:91:d1:d8:50:2e:70:
54:0e:2e:df:68:1b:2f:1a:fe:1f:76:4f:c7:17:38:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:B2:E5:8E:F2:6C:5A:2B:0F:F7:46:B9:C7:7C:AE:0C:71:23:32
X509v3 Authority Key Identifier:
keyid:94:04:61:08:B5:42:61:44:24:22:C0:FB:C8:0B:3F:A9:86:EB:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lARhCLVCYUQkIsD7yAs_qYbr6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32ce7d-fb46-419c-af1d-9394924c3c76/1/lARhCLVCYUQkIsD7yAs_qYbr6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:67:5e:8f:2d:a0:ae:3d:41:8c:f1:1c:d3:37:31:86:ef:5a:
76:6e:70:b5:54:43:2e:ce:b9:eb:1b:d1:1d:82:e7:26:28:05:
6e:35:da:20:4f:e4:bb:f5:2f:45:e7:5e:50:84:ab:47:a0:c2:
d0:e2:19:f7:b8:99:1d:4a:c5:3c:7f:f9:e2:a0:82:d4:46:6e:
1f:c7:32:37:7c:8b:24:bc:79:03:1d:d3:20:30:56:ec:6a:90:
df:87:05:eb:ef:9d:e2:c2:cb:d0:6b:1d:11:0d:51:94:a4:57:
f4:09:b0:57:23:d5:bf:0b:25:ca:46:54:a2:28:96:41:5e:dc:
08:8d:bf:f8:bd:0b:c3:26:05:c2:4f:68:16:e3:7a:51:3d:61:
73:d7:a9:31:6a:6a:1c:92:9e:ff:74:a6:6b:30:b2:b1:04:f8:
d5:a5:6e:cd:6c:43:90:52:f2:20:f5:50:ac:f0:4d:b9:45:d6:
4d:35:98:a6:34:75:aa:2e:7f:0b:c5:2d:13:5d:6e:98:8c:7a:
5e:9b:f1:57:47:0d:02:47:3f:29:5f:f0:95:0a:13:38:85:1a:
80:6b:95:b0:c7:f6:4e:8b:4e:45:49:08:a0:b8:a0:fe:dd:c6:
e8:21:5a:8d:6f:93:81:02:2c:53:cd:45:af:32:38:ca:69:4e:
25:38:d9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:21 2026 by rpki-client